Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2058ff88-7409-39e3-858f-9fbdf04088d8.roa
File:                     2058ff88-7409-39e3-858f-9fbdf04088d8.roa (raw, json)
Hash identifier:          d9J7bYrrNPCJjj3hs5han9pHrAfnVvmAv0bKrysWbLo=
Subject key identifier:   AE:B3:90:74:BC:0E:FD:E2:DA:17:CC:95:64:68:2C:1D:1E:D3:C8:93
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B48E200C353811D92FEF04400
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2058ff88-7409-39e3-858f-9fbdf04088d8.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     397235
IP address blocks:        204.74.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e2:00:c3:53:81:1d:92:fe:f0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=8cffc8b8-8a4b-4b7e-a786-1f4e7a55e26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:9b:21:7d:53:6c:cb:cf:f6:cc:30:1c:82:
                    04:d3:b5:1b:bf:5a:33:95:0d:3d:59:8b:49:32:8e:
                    b3:89:ac:5d:49:fe:95:57:1e:41:62:0e:33:00:ad:
                    c3:23:5c:c8:24:69:3b:41:cc:c2:df:b1:46:cf:ff:
                    b4:7d:2d:e9:8a:f8:8f:49:9b:3a:73:04:b3:56:67:
                    b1:f5:fd:34:43:c2:e1:7f:fa:02:d3:0e:ad:9d:52:
                    4f:09:6c:70:75:28:36:9f:4f:74:ab:ea:f2:9b:5f:
                    e7:3a:b9:25:b2:e2:2f:d0:16:24:c5:c4:91:57:b6:
                    6d:e8:94:6d:2b:b3:9d:fc:22:20:a5:31:b9:e3:7b:
                    20:01:42:93:1c:e4:dd:35:32:d2:fe:53:94:8b:15:
                    31:74:de:cc:35:83:d5:3a:5c:a8:58:a5:49:23:39:
                    f8:12:fd:56:4e:b9:88:b2:8a:a4:43:9b:79:dc:b3:
                    6e:77:b3:87:1d:8f:89:c2:b0:27:74:40:0b:24:cf:
                    a3:35:0e:c3:8e:a8:ac:98:52:ac:b5:1d:bc:95:42:
                    31:64:e3:a6:4d:75:b1:7b:c0:d8:52:31:03:44:88:
                    2e:21:26:d6:56:40:e7:9e:76:76:77:48:6e:a8:3e:
                    e8:b9:50:a0:bb:dd:17:63:76:6c:8f:fe:e9:7a:66:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:90:74:BC:0E:FD:E2:DA:17:CC:95:64:68:2C:1D:1E:D3:C8:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/2058ff88-7409-39e3-858f-9fbdf04088d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:3e:c0:88:c9:84:77:fc:31:2d:dd:e3:22:2c:a6:19:1b:
         bb:a4:61:e8:6d:9e:da:4e:06:52:73:98:06:78:2f:be:c6:56:
         7b:bf:8d:72:71:68:b3:98:cf:4a:2b:7f:e7:94:d4:38:e6:ed:
         81:d5:90:8a:7b:c6:19:10:84:50:53:99:93:9b:5b:94:65:f5:
         80:8e:6f:22:64:0e:72:88:9c:48:dd:3c:7f:5e:cd:4e:fb:fe:
         4a:37:f0:f0:be:b7:f9:a1:dc:34:31:12:8a:19:82:84:4d:bf:
         8f:cd:bb:c9:78:e4:2d:7d:a4:ad:b0:52:af:14:ee:6a:e6:41:
         77:22:ad:79:fe:7d:34:ce:7b:be:97:c8:aa:2e:f7:3b:24:90:
         d3:cb:50:1c:bf:de:5a:50:c8:1f:91:dd:ca:d9:47:73:6d:0c:
         17:11:f4:d2:45:07:02:16:ce:47:cd:b6:42:8a:9e:ca:2e:2f:
         ef:f4:54:6b:94:b8:ef:6d:09:8a:5b:48:45:f1:74:01:13:40:
         15:e8:13:dc:df:c7:83:a5:b0:a4:26:e4:46:6e:13:3d:c5:fe:
         14:88:bd:e4:d3:61:31:a0:52:86:92:43:00:b0:83:6f:c2:ed:
         92:b7:99:44:e1:4d:5d:c6:68:58:13:c5:a3:03:8f:49:ea:2b:
         66:0c:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:17 2025 by rpki-client